CISA urges action on Daemon Tools Lite CVE-2026-8398 vulnerability

The CISA maintains the Known Exploited Vulnerabilities (KEV) Catalog to assist organizations in managing and prioritizing vulnerabilities that are actively exploited. The catalog serves as a crucial resource for cybersecurity communities and includes guidance on using the KEV catalog effectively. A specific vulnerability, CVE-2026-8398, related to Daemon Tools Lite, is highlighted as having a high impact on security with known risks to confidentiality, integrity, and availability.

Organizations are advised to apply vendor-specific mitigations or discontinue the product if mitigations are unavailable. The catalog is accessible in multiple formats, including CSV and JSON, and users can subscribe for updates.